Linux软件安装 —— Elasticsearch集群安装（带密码验证）

一、节点说明

二、JDK安装

参考本人此篇文章：Linux软件安装 —— JDK安装

三、Elasticsearch安装

1、软件下载

官网地址：https://www.elastic.co/cn/downloads/past-releases?product=elasticsearch

本文使用：elasticsearch-7.10.0-linux-x86_64.tar.gz

2、基础环境准备(三节点)

（1）修改系统文件

# 修改limits.confvim/etc/security/limits.conf * soft nofile65536* hard nofile65536* soft memlock unlimited * hard memlock unlimited# 修改sysctl.confvim/etc/sysctl.conf vm.max_map_count=262144sysctl -p

（2）上传并解压

# 解压tar-zxvf elasticsearch-7.10.0-linux-x86_64.tar.gz -C /opt/module/# 重命名mvelasticsearch-7.10.0/ elasticsearch

（3）创建elastic用户

# 创建用户useraddelastic# 修改密码passwdelastic# 修改所属者chown-R elastic:elastic elasticsearch# 切换elastic用户su- elastic

3、修改配置

（1）node02

vimelasticsearch.yml# clustercluster.name: my_elastic cluster.routing.allocation.cluster_concurrent_rebalance:16cluster.routing.allocation.node_concurrent_recoveries:16cluster.routing.allocation.node_initial_primaries_recoveries:16# nodenode.name: node02 node.master:truenode.data:true# Pathspath.data: /opt/module/elasticsearch/data path.logs: /opt/module/elasticsearch/logs# Networknetwork.host:0.0.0.0 network.publish_host: node02 http.port:9200transport.port:9300network.tcp.keep_alive:truenetwork.tcp.no_delay:truetransport.tcp.compress:true###### 允许es-head连接 ######http.cors.allow-origin:"*"http.cors.enabled:truehttp.max_content_length: 200mb# Discoverydiscovery.seed_hosts:["node02:9300","node03:9300","node04:9300"]cluster.initial_master_nodes:["node02","node03","node04"]# gatewaygateway.recover_after_nodes:2#################### xpack密码配置 ####################xpack.security.enabled:truexpack.security.transport.ssl.enabled:truexpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

（2）node03

# node03在node02的基础上修改以下内容node.name: node03 network.publish_host: node03

（3）node04

# node04在node02的基础上修改以下内容node.name: node03 network.publish_host: node03

（4）修改JVM资源

vimjvm.options -Xms8g -Xmx8g

基本原则
不超过物理内存的50%：为操作系统和文件系统缓存预留空间
最大不超过32GB：避免使用压缩指针带来的性能损失
最小和最大设置为相同值：避免堆大小调整的开销

（5）生成TLS和身份验证

# 同一个集群身份验证信息得一样/opt/module/elasticsearch# 给个初始空密码，一会儿修改bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass""# 将生成的认证信息分发到其他节点scpconfig/elastic-certificates.p12 elastic@node03:/opt/module/elasticsearch/config/scpconfig/elastic-certificates.p12 elastic@node04:/opt/module/elasticsearch/config/

4、启动集群

（1）启动

# 三节点执行bin/elasticsearch -d# 验证集群状态curl-X GET"node02:9200/_cluster/health?pretty"# 出现报错是正常现象，因为还没设密码，说明集群启动成功

5、修改密码

# 单节点执行bin/elasticsearch-setup-passwords interactive# 需要设置elastic，apm_system，kibana_system，logstash_system，beats_system，remote_monitoring_user等账号密码，自行设置复杂密码，本文统一设置elasticelastic：elastic apm_system：elastic kibana_system：elastic logstash_system：elastic beats_system：elastic remote_monitoring_user：elastic# 验证集群状态curl-u elastic:elastic -X GET"http://node02:9200/_cluster/health?pretty"curl-u elastic:elastic -XGET"http://node02:9200/_cat/indices/.security-*?v&s=index&pretty"

6、远程连接

此处使用浏览器的Elasticsearch-head插件